From Jens.Schweikhardt at tesat.de Wed Sep 13 08:30:42 2023 From: Jens.Schweikhardt at tesat.de (Schweikhardt, Jens (TSPCE6-TL5)) Date: Wed, 13 Sep 2023 08:30:42 +0000 Subject: Has RTEMS ever had a CVE? Message-ID: <5e11ecf4a6ed4d45bc0323aaeed16521@tesat.de> Hello, I wonder if RTEMS ever had a vulnerability for which a CVE was created (only the RTEMS OS proper, not libbsd or newlib or other components). Search engine results don?t turn up much, if anything, so I?m inclined to think the answer is ?no?. I found Gedare?s PDF about security hardening for EPICS/RTEMS talking a bit about vulnerabilities, but that does not mention any true CVEs against RTEMS. Can anyone say with certainty there are no CVEs against RTEMS? Jens ________________________________ Tesat-Spacecom GmbH & Co. KG Sitz: Backnang; Registergericht: Amtsgericht Stuttgart HRA 270977 Persoenlich haftender Gesellschafter: Tesat-Spacecom Geschaeftsfuehrungs GmbH; Sitz: Backnang; Registergericht: Amtsgericht Stuttgart HRB 271658; Geschaeftsfuehrung: Thomas Reinartz, Kerstin Basche, Ralph Schmid [banner] -------------- next part -------------- An HTML attachment was scrubbed... URL: From joel at rtems.org Wed Sep 13 13:39:20 2023 From: joel at rtems.org (Joel Sherrill) Date: Wed, 13 Sep 2023 08:39:20 -0500 Subject: Has RTEMS ever had a CVE? In-Reply-To: <5e11ecf4a6ed4d45bc0323aaeed16521@tesat.de> References: <5e11ecf4a6ed4d45bc0323aaeed16521@tesat.de> Message-ID: On Wed, Sep 13, 2023 at 3:30?AM Schweikhardt, Jens (TSPCE6-TL5) < Jens.Schweikhardt at tesat.de> wrote: > Hello, > > > > I wonder if RTEMS ever had a vulnerability for which a CVE was created > > (only the RTEMS OS proper, not libbsd or newlib or other components). > > Search engine results don?t turn up much, if anything, so I?m inclined to > think the answer is ?no?. > > I found Gedare?s PDF about security hardening for EPICS/RTEMS talking a > bit about > > vulnerabilities, but that does not mention any true CVEs against RTEMS. > > Can anyone say with certainty there are no CVEs against RTEMS? > There was one reported for the GoAhead webserver which we used to bundle with RTEMS. But that CVE was filed against that package years after we removed it. Gedare Bloom posted information about it in October 2021. https://lists.rtems.org/pipermail/users/2021-October/068533.html There has never (fingers crossed) been one reported against RTEMS. I would expect there have been CVEs against packages used with RTEMS which we get from third parties. But I don't know about any of those. I'm not conceited enough to think it could never happen. It just hasn't. --joel > > Jens > > > > > > ------------------------------ > > Tesat-Spacecom GmbH & Co. KG > Sitz: Backnang; Registergericht: Amtsgericht Stuttgart HRA 270977 > Persoenlich haftender Gesellschafter: Tesat-Spacecom Geschaeftsfuehrungs > GmbH; > Sitz: Backnang; Registergericht: Amtsgericht Stuttgart HRB 271658; > Geschaeftsfuehrung: Thomas Reinartz, Kerstin Basche, Ralph Schmid > > [image: banner] > _______________________________________________ > users mailing list > users at rtems.org > http://lists.rtems.org/mailman/listinfo/users > -------------- next part -------------- An HTML attachment was scrubbed... URL: From junkes at fhi-berlin.mpg.de Wed Sep 27 18:26:18 2023 From: junkes at fhi-berlin.mpg.de (Heinz Junkes) Date: Wed, 27 Sep 2023 20:26:18 +0200 Subject: rsb gdb build on aarch64 (OS-X M2) Message-ID: <7E9AD266-31D3-46AD-B9C1-776B107EF8FF@fhi-berlin.mpg.de> Hallo, I'm trying to build RTEMS on a MAC (M2) and I'm getting the following error: config: tools/rtems-gdb-13.2.cfg error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" Build FAILED Build Set: Time 0:02:09.754310 error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" Build Set: Time 0:02:09.758390 Build FAILED building failed Danke Heinz Complete output: ... building tool set for arm RTEMS Source Builder - Set Builder, 6 (35c73203df1e) Build Set: 6/rtems-arm Build Set: tools/rtems-default-tools.bset config: devel/dtc-1.6.1-1.cfg package: dtc-1.6.1-arm64-apple-darwin23.0.0-1 Creating source directory: sources download: https://www.kernel.org/pub/software/utils/dtc/dtc-1.6.1.tar.gz -> sources/dtc-1.6.1.tar.gz redirect: https://mirrors.edge.kernel.org/pub/software/utils/dtc/dtc-1.6.1.tar.gz downloading: sources/dtc-1.6.1.tar.gz - 199.0kB of 199.0kB (100%) Creating source directory: patches download: https://devel.rtems.org/raw-attachment/ticket/4783/0001-checks.c-Ensure-argument-is-an... -> patches/0001-checks.c-Ensure-argument-is-an-integer-v2.patch downloading: patches/0001-checks.c-Ensure-argument-is-an-integer-v2.patch - 773.0 bytes of 773.0 bytes (100%) building: dtc-1.6.1-arm64-apple-darwin23.0.0-1 sizes: dtc-1.6.1-arm64-apple-darwin23.0.0-1: 3.038MB (installed: 712.910KB) cleaning: dtc-1.6.1-arm64-apple-darwin23.0.0-1 reporting: devel/dtc-1.6.1-1.cfg -> dtc-1.6.1-arm64-apple-darwin23.0.0-1.txt reporting: devel/dtc-1.6.1-1.cfg -> dtc-1.6.1-arm64-apple-darwin23.0.0-1.xml config: devel/expat-2.5.0-1.cfg package: expat-2.5.0-arm64-apple-darwin23.0.0-1 download: https://github.com/libexpat/libexpat/releases/download/R_2_5_0/expat-2.5.0.tar.gz -> sources/expat-2.5.0.tar.gz redirect: https://objects.githubusercontent.com/github-production-release-asset-2e65be/80314213/... downloading: sources/expat-2.5.0.tar.gz - 702.4kB of 702.4kB (100%) building: expat-2.5.0-arm64-apple-darwin23.0.0-1 sizes: expat-2.5.0-arm64-apple-darwin23.0.0-1: 7.537MB (installed: 886.030KB) cleaning: expat-2.5.0-arm64-apple-darwin23.0.0-1 reporting: devel/expat-2.5.0-1.cfg -> expat-2.5.0-arm64-apple-darwin23.0.0-1.txt reporting: devel/expat-2.5.0-1.cfg -> expat-2.5.0-arm64-apple-darwin23.0.0-1.xml config: devel/gmp-6.2.1.cfg package: gmp-6.2.1-arm64-apple-darwin23.0.0-1 download: https://gcc.gnu.org/pub/gcc/infrastructure/gmp-6.2.1.tar.bz2 -> sources/gmp-6.2.1.tar.bz2 downloading: sources/gmp-6.2.1.tar.bz2 - 2.4MB of 2.4MB (100%) building: gmp-6.2.1-arm64-apple-darwin23.0.0-1 sizes: gmp-6.2.1-arm64-apple-darwin23.0.0-1: 21.584MB (installed: 1.428MB) cleaning: gmp-6.2.1-arm64-apple-darwin23.0.0-1 reporting: devel/gmp-6.2.1.cfg -> gmp-6.2.1-arm64-apple-darwin23.0.0-1.txt reporting: devel/gmp-6.2.1.cfg -> gmp-6.2.1-arm64-apple-darwin23.0.0-1.xml Build Set: textproc/gsed-internal.bset config: textproc/gsed.cfg package: gsed-4.9-arm64-apple-darwin23.0.0-1 download: https://ftp.gnu.org/gnu/sed/sed-4.9.tar.gz -> sources/sed-4.9.tar.gz downloading: sources/sed-4.9.tar.gz - 2.2MB of 2.2MB (100%) building: gsed-4.9-arm64-apple-darwin23.0.0-1 sizes: gsed-4.9-arm64-apple-darwin23.0.0-1: 18.014MB (installed: 0.000B) cleaning: gsed-4.9-arm64-apple-darwin23.0.0-1 cleaning: gsed-4.9-arm64-apple-darwin23.0.0-1 Build Set: Time 0:00:41.529142 Build Set: print/texinfo-internal.bset config: print/texinfo.cfg package: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 download: https://ftp.gnu.org/gnu/texinfo/texinfo-7.0.3.tar.gz -> sources/texinfo-7.0.3.tar.gz downloading: sources/texinfo-7.0.3.tar.gz - 10.3MB of 10.3MB (100%) building: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 sizes: texinfo-7.0.3-arm64-apple-darwin23.0.0-1: 88.097MB (installed: 0.000B) cleaning: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 cleaning: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 Build Set: Time 0:00:49.355165 config: tools/rtems-gdb-13.2.cfg error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" Build FAILED Build Set: Time 0:02:09.754310 error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" Build Set: Time 0:02:09.758390 Build FAILED building failed -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 4712 bytes Desc: not available URL: From junkes at fhi-berlin.mpg.de Wed Sep 27 20:28:51 2023 From: junkes at fhi-berlin.mpg.de (Heinz Junkes) Date: Wed, 27 Sep 2023 22:28:51 +0200 Subject: rsb gdb build on aarch64 (OS-X M2) In-Reply-To: <7E9AD266-31D3-46AD-B9C1-776B107EF8FF@fhi-berlin.mpg.de> References: <7E9AD266-31D3-46AD-B9C1-776B107EF8FF@fhi-berlin.mpg.de> Message-ID: <4B31F5AE-AF29-4845-9C5F-83838EC0786F@fhi-berlin.mpg.de> It was a mess with homebrew and python versions on my system. Rsb works well ;-) Heinz > On 27. Sep 2023, at 20:26, Heinz Junkes wrote: > > Hallo, > > I'm trying to build RTEMS on a MAC (M2) and I'm getting the following error: > > > config: tools/rtems-gdb-13.2.cfg > error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" > Build FAILED > Build Set: Time 0:02:09.754310 > error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" > Build Set: Time 0:02:09.758390 > Build FAILED > building failed > > > Danke Heinz > > Complete output: > > ... building tool set for arm > RTEMS Source Builder - Set Builder, 6 (35c73203df1e) > Build Set: 6/rtems-arm > Build Set: tools/rtems-default-tools.bset > config: devel/dtc-1.6.1-1.cfg > package: dtc-1.6.1-arm64-apple-darwin23.0.0-1 > Creating source directory: sources > download: https://www.kernel.org/pub/software/utils/dtc/dtc-1.6.1.tar.gz -> sources/dtc-1.6.1.tar.gz > redirect: https://mirrors.edge.kernel.org/pub/software/utils/dtc/dtc-1.6.1.tar.gz > downloading: sources/dtc-1.6.1.tar.gz - 199.0kB of 199.0kB (100%) > Creating source directory: patches > download: https://devel.rtems.org/raw-attachment/ticket/4783/0001-checks.c-Ensure-argument-is-an... -> patches/0001-checks.c-Ensure-argument-is-an-integer-v2.patch > downloading: patches/0001-checks.c-Ensure-argument-is-an-integer-v2.patch - 773.0 bytes of 773.0 bytes (100%) > building: dtc-1.6.1-arm64-apple-darwin23.0.0-1 > sizes: dtc-1.6.1-arm64-apple-darwin23.0.0-1: 3.038MB (installed: 712.910KB) > cleaning: dtc-1.6.1-arm64-apple-darwin23.0.0-1 > reporting: devel/dtc-1.6.1-1.cfg -> dtc-1.6.1-arm64-apple-darwin23.0.0-1.txt > reporting: devel/dtc-1.6.1-1.cfg -> dtc-1.6.1-arm64-apple-darwin23.0.0-1.xml > config: devel/expat-2.5.0-1.cfg > package: expat-2.5.0-arm64-apple-darwin23.0.0-1 > download: https://github.com/libexpat/libexpat/releases/download/R_2_5_0/expat-2.5.0.tar.gz -> sources/expat-2.5.0.tar.gz > redirect: https://objects.githubusercontent.com/github-production-release-asset-2e65be/80314213/... > downloading: sources/expat-2.5.0.tar.gz - 702.4kB of 702.4kB (100%) > building: expat-2.5.0-arm64-apple-darwin23.0.0-1 > sizes: expat-2.5.0-arm64-apple-darwin23.0.0-1: 7.537MB (installed: 886.030KB) > cleaning: expat-2.5.0-arm64-apple-darwin23.0.0-1 > reporting: devel/expat-2.5.0-1.cfg -> expat-2.5.0-arm64-apple-darwin23.0.0-1.txt > reporting: devel/expat-2.5.0-1.cfg -> expat-2.5.0-arm64-apple-darwin23.0.0-1.xml > config: devel/gmp-6.2.1.cfg > package: gmp-6.2.1-arm64-apple-darwin23.0.0-1 > download: https://gcc.gnu.org/pub/gcc/infrastructure/gmp-6.2.1.tar.bz2 -> sources/gmp-6.2.1.tar.bz2 > downloading: sources/gmp-6.2.1.tar.bz2 - 2.4MB of 2.4MB (100%) > building: gmp-6.2.1-arm64-apple-darwin23.0.0-1 > sizes: gmp-6.2.1-arm64-apple-darwin23.0.0-1: 21.584MB (installed: 1.428MB) > cleaning: gmp-6.2.1-arm64-apple-darwin23.0.0-1 > reporting: devel/gmp-6.2.1.cfg -> gmp-6.2.1-arm64-apple-darwin23.0.0-1.txt > reporting: devel/gmp-6.2.1.cfg -> gmp-6.2.1-arm64-apple-darwin23.0.0-1.xml > Build Set: textproc/gsed-internal.bset > config: textproc/gsed.cfg > package: gsed-4.9-arm64-apple-darwin23.0.0-1 > download: https://ftp.gnu.org/gnu/sed/sed-4.9.tar.gz -> sources/sed-4.9.tar.gz > downloading: sources/sed-4.9.tar.gz - 2.2MB of 2.2MB (100%) > building: gsed-4.9-arm64-apple-darwin23.0.0-1 > sizes: gsed-4.9-arm64-apple-darwin23.0.0-1: 18.014MB (installed: 0.000B) > cleaning: gsed-4.9-arm64-apple-darwin23.0.0-1 > cleaning: gsed-4.9-arm64-apple-darwin23.0.0-1 > Build Set: Time 0:00:41.529142 > Build Set: print/texinfo-internal.bset > config: print/texinfo.cfg > package: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 > download: https://ftp.gnu.org/gnu/texinfo/texinfo-7.0.3.tar.gz -> sources/texinfo-7.0.3.tar.gz > downloading: sources/texinfo-7.0.3.tar.gz - 10.3MB of 10.3MB (100%) > building: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 > sizes: texinfo-7.0.3-arm64-apple-darwin23.0.0-1: 88.097MB (installed: 0.000B) > cleaning: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 > cleaning: texinfo-7.0.3-arm64-apple-darwin23.0.0-1 > Build Set: Time 0:00:49.355165 > config: tools/rtems-gdb-13.2.cfg > error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" > Build FAILED > Build Set: Time 0:02:09.754310 > error: config error: gdb-common-1.cfg:127: "gdb: python: library file not found: libpython3.11.*, please install" > Build Set: Time 0:02:09.758390 > Build FAILED > building failed_______________________________________________ > users mailing list > users at rtems.org > http://lists.rtems.org/mailman/listinfo/users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 4712 bytes Desc: not available URL: From chrisj at rtems.org Thu Sep 28 00:13:26 2023 From: chrisj at rtems.org (Chris Johns) Date: Thu, 28 Sep 2023 10:13:26 +1000 Subject: rsb gdb build on aarch64 (OS-X M2) In-Reply-To: <4B31F5AE-AF29-4845-9C5F-83838EC0786F@fhi-berlin.mpg.de> References: <7E9AD266-31D3-46AD-B9C1-776B107EF8FF@fhi-berlin.mpg.de> <4B31F5AE-AF29-4845-9C5F-83838EC0786F@fhi-berlin.mpg.de> Message-ID: <4cf1af9d-8a23-12b6-bcfb-d6362b6830e4@rtems.org> On 28/9/2023 6:28 am, Heinz Junkes wrote: > It was a mess with homebrew and python versions on my system. > Rsb works well ;-) Thanks for following this up and good to know. Have you managed to use the gdb executable? A user has reported on discord the ARM gdb crashing however I do not see that happening with my build. I build on my M2 using a python.org install, a virtual environment and X code. I welcome users using homebrew or macports but I cannot directly support the efforts because of the amount of work to that would be more than I can handle. Chris